AMENDMENTS TO THE CLAIMS 



1-22. (Canceled) 

23. (Currently Amended) A record carrier comprising: 
a storage unit; 
a processor; 

a requisition receiving unit operable to receive, from a terminal device having the record 
carrier attached thereto, a requisition for access to the storage unit; 

an acquisition unit operable to acquire an access condition indicating whether or not the 
terminal device is authorized to access the storage unit; 

a judging unit operable to judge, using the processor, whether or not the requisition 
satisfies the access condition; 

a prevention unit operable to prevent the access of the terminal device to the storage unit 
when the judging unit judges that the requisition does not satisfy the access condition; and 

The record carrier of Claim 1, further comprising: 

a communication unit operable to communicate with an access condition management 
server connected via a network, wherein 

the access condition management server manages, in one-to-one correspondence, (i) 
identification information pieces that respectively identify a plurality of record carriers including 
the record carrier, and (ii) a plurality of access conditions including the access condition, 

the acquisition unit (i) transmits one of the identification information pieces that 
identifies the record carrier to the access condition management server via the communication 
unit, and (ii) acquires the access condition corresponding to the one of the identification 
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information pieces from the access condition management server via the communication unit, 
the access condition includes an identifier list including one or more identifiers which 

respectively identify one or more devices authorized to access the storage unit, 

the requisition includes a requiring device identifier for identifying the terminal device, 

and 

the judging unit judges that, (i) when an identifier matching the requiring device 
identifier is included in the identifier list, the requisition satisfies the access condition, and (ii) 
when an identifier matching the requiring device identifier is not included in the identifier list, 
the requisition does not satisfy the access condition. 

24. (Original) The record carrier of Claim 23, 

wherein the acquisition unit acquires from the access condition management server via 
the communication unit, along with the access condition, signature data generated based on the 
access condition, and 

the record carrier further comprising: 

a tamper detection unit operable to examine the signature data using a verification 
key relevant to the access condition management server, and detect whether or not the access 
condition has been tampered; and 

a prohibition unit operable to prohibit, when the tamper detection detects that the 
access condition has been tampered, the judging unit from judging. 

25. (Cancelled) 
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26. (Withdrawn) The record carrier of Claim 24, wherein 

the access condition includes an identifier list including one or more identifiers and one 
or more sets of number information which correspond one-to-one with the identifiers 
respectively, the one or more identifiers identifying one or more devices authorized to access the 
storage unit, each set of number information indicating a count of accesses available for the 
corresponding device to access the storage unit, 

the requisition includes a requiring device identifier for identifying the terminal device, 

the judging unit includes: 

a holding unit operable to hold a count of accesses indicating how many times the 
terminal device has accessed the storage unit; 

a 1st judging subunit operable to judge whether or not an identifier matching the 
requiring device identifier is included in the identifier list; and 

a 2nd judging subunit operable to judge, when the 1st judging subunit judges that 
the matching identifier is included, whether or not a count indicated by a set of number 
information corresponding to the matching identifier is larger than the count of accesses held by 
the holding unit, and 

the judging unit judges that, (i) when either one of a judgment result by the 1 st judging 
subunit and a judgment result by the 2nd judging subunit is negative, the requisition does not 
satisfy the access condition, and (ii) when both the judgment results are positive, the requisition 
satisfies the access condition. 

27. (Withdrawn) The record carrier of Claim 24, wherein 
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the access condition includes an identifier list including one or more identifiers and one 
or more sets of period information which correspond one-to-one with the identifiers respectively, 
the one or more identifiers identifying one or more devices authorized to access the storage unit, 
each set of period information indicating a time period available for the corresponding device to 
access the storage unit, 

the requisition includes a requiring device identifier for identifying the terminal device, 

and 

the judging unit includes: 

a time managing unit operable to manage a current date and time; 

a 1st judging subunit operable to judge whether or not an identifier matching the 
requiring device identifier is included in the identifier list; and 

a 2nd judging subunit operable to judge, when the 1st judging subunit judges that 
the matching identifier is included, whether or not the current time is within a time period 
indicated by a set of period information corresponding to the matching identifier, and 

the judging unit judges that, (i) when either one of a judgment result by the 1st judging 
subunit and a judgment result by the 2nd judging subunit is negative, the requisition does not 
satisfy the access condition, and (ii) when both the judgment results are positive, the requisition 
satisfies the access condition. 

28. (Withdrawn) The record carrier of Claim 24, wherein 
the storage unit comprises a plurality of memory blocks, 

the access condition includes an identifier list including one or more identifiers and one 
or more sets of memory block information, which correspond one-to-one with the identifiers 
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respectively identifying one or more devices authorized to access the storage unit, the sets of 
memory block information each indicating one or more of the memory blocks available for each 
of the corresponding devices to access, 

the requisition includes a requiring device identifier for identifying the terminal device 
and memory block specifying information for specifying one of the memory blocks, and 

the judging unit includes: 

a 1st judging subunit operable to judge whether or not an identifier matching the 
requiring device identifier is included in the identifier list; and 

a 2nd judging subunit operable to judge, when the 1 st judging subunit judges that 
the matching identifier is included, whether or not the memory block specified by the memory 
block specifying information is included in the one or more of the memory blocks indicated by a 
set of the memory block information corresponding to the matching identifier, 

and judges that, (i) when either one of a judgment result by the 1st judging subunit and a 
judgment result by the 2nd judging subunit is negative, the requisition does not satisfy the access 
condition, and (ii) when both the judgment results are positive, the requisition satisfies the access 
condition. 

29. (Previously Presented) The record carrier of Claim 24, wherein 
the storage unit stores one or more sets of program data, 

the access condition includes an identifier list including one or more identifiers and one 
or more sets of program information, which correspond one-to-one with the identifiers 
respectively identifying one or more devices authorized to access the storage unit, the sets of 
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program information each indicating one or more sets of the program data available for each of 
the corresponding devices to access, 

the requisition includes a requiring device identifier for identifying the terminal device 
and program specifying information for specifying one set of the program data, and 

the judging unit includes: 

a 1st judging subunit operable to judge whether or not an identifier matching the 
requiring device identifier is included in the identifier list; and 

a 2nd judging subunit operable to judge, when the 1st judging subunit judges that 
the matching identifier is included, whether or not the set of program data specified by the 
program specifying information is included in the one or more sets of the program data indicated 
by a set of the program information corresponding to the matching identifier, 

and judges that, (i) when either one of a judgment result by the 1st judging subunit and a 
judgment result by the 2nd judging subunit is negative, the requisition does not satisfy the access 
condition, and (ii) when both the judgment results are positive, the requisition satisfies the access 
condition. 

30. (Withdrawn) The record carrier of Claim 24, wherein 

the access condition includes (i) an identifier list including one or more identifiers which 
respectively identify one or more devices authorized to access the storage unit, and (ii) a 
biometrics list including one or more sets of biometric information for respectively identifying 
one or more users authorized to access the storage unit, 
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the requisition includes a requiring device identifier for identifying the terminal device 
and operator biometric information indicating biometric information of an operator of the 
terminal device, and 

the judging unit includes: 

a 1st judging subunit operable to judge whether or not an identifier matching the 
requiring device identifier is included in the identifier list; and 

a 2nd judging subunit operable to judge, when the 1st judging subunit judges that 
the matching identifier is included, whether or not a set of the biometric information 
corresponding to the operator biometric information is included in the biometrics list, 

and judges that, (i) when either one of a judgment result by the 1 st judging subunit and a 
judgment result by the 2nd judging subunit is negative, the requisition does not satisfy the access 
condition, and (ii) when both the judgment results are positive, the requisition satisfies the access 
condition. 

31. (Withdrawn) The record carrier of Claim 24, wherein 

the access condition includes (i) an identifier list including one or more identifiers which 
respectively identify one or more devices authorized to access the storage unit, and (ii) a 
password list including one or more sets of password information respectively specified by one 
or more users authorized to access the storage unit, 

the requisition includes a requiring device identifier for identifying the terminal device 
and an entry password entered by an operator of the terminal device, and 

the judging unit includes: 
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a 1st judging subunit operable to judge whether or not an identifier matching the 
requiring device identifier is included in the identifier list; and 

a 2nd judging subunit operable to judge whether or not a password indicated by a 
set of password information corresponding to the entry password is included in the password list, 
and judges that, (i) when either one of a judgment result by the 1st judging subunit and a 
judgment result by the 2nd judging subunit is negative, the requisition does not satisfy the access 
condition, and (ii) when both the judgment results are positive, the requisition satisfies the access 
condition. 

32. (Original) The record carrier of Claim 23, wherein 

the acquisition unit acquires, each time when the requisition receiving unit receives the 
requisition, the access condition from the access condition management server. 

33. (Original) The record carrier of Claim 23, wherein 

the acquisition unit acquires the access condition from the access condition management 
server at predetermined time intervals. 

34. (Original) The record carrier of Claim 23, wherein 

the acquisition unit acquires, when it is detected that the record carrier is attached to a 
terminal device, the access condition from the access condition management server. 

35-41. (Canceled) 
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